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DETAILED ACTION 

1 . A request for continued examination under 37 CFR 1.114, including tine fee set 
forth in 37 CFR 1 .17(e), was filed in this application after final rejection. Since 
this application is eligible for continued examination under 37 CFR 1.114, and the 
fee set forth In 37 CFR 1 .17(e) has been timely paid, the finality of the previous 
Office action has been withdrawn pursuant to 37 CFR 1 .1 14. Applicant's 
submission filed on 2/26/2009 has been entered. 

2. Claims 1, 4, 7, 10, 13-15, 20-21, and 24-29 are pending. 

Response to Arguments 

3. Applicant's arguments with respect to the prior art rejection of the claims have 
been considered but are moot in view of the new ground(s) of rejection. 

Claim Rejections - 35 USC § 101 

4. 35 U.S.C. 101 reads as follows: 

Whoever invents or discovers any new and useful process, macliine, manufacture, or composition of 
matter, or any new and useful improvement thereof, may obtain a patent therefor, subject to the 
conditions and requirements of this title. 

5. Claims 4, 10, 13, and 14 are rejected under 35 U.S.C. 101 because the claimed 
invention is directed to non-statutory subject matter. 

6. Independent claims 4, 10, and 13, respectively recite, "An apparatus, 
comprising..." "A system comprising..." and "An apparatus, comprising..." where 
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all of the limitations (e.g. "means for receiving," "authentication server") may be 
interpreted and implemented as software alone when read in light of the 
specification. Therefore the claims are directed to functional descriptive material 
that is not embodied on a computer system or computer storage medium which 
is non-statutory. In order for the claims to comply with 35 U.S.C. 1 01 , they 
simply need to explicitly recite hardware elements, see, for example, claim 20. 

Claim Rejections - 35 USC § 103 

7. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

8. Claims 1, 4, 7, 10, 13-15, 20-21, and 24-29 are rejected under 35 U.S.C. 103(a) 
as being unpatentable over O'Neill (US Pub. No. 2003/0176188) in view of 
Bhagwat et al (US Pat. 6,651,105), hereafter "Bhagwat." 

9. As to claim 1 , O'Neill discloses a method, comprising: 

receiving a request for full authentication of a terminal ([0031], lines 1-8, every 
mobile device (terminal or end node) will have a home AAA server (see Fig. 1), 
at this home AAA server will be stored service profiles that inherently require full 
authentication of that particular mobile device); 
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transmitting to the terminal a reauthentication identity including a unique 
realm name uniquely identifying an authentication server ([0053], lines 13-17, the 
NAI (reauthentication identity) of any end node (terminal) includes a realm name 
and identifies the home authentication server; it is essential that the realm name 
is transmitted to the mobile device); 

receiving a request for reauthentication from the terminal, the request for 
reauthentication including the reauthentication identity including the unique realm 
name uniquely identifying the authentication server ([0053], lines 13-23, any end 
node (terminal) sending an authentication request identifying its home 
authentication server (via a "reauthentication identity") reads upon "a request for 
reauthentication" as the end node was previously authorized by it's home 
authentication server, as that server stores it's service profile); 

wherein the request for reauthentication is routed to the authentication server 
according to the unique ream name included in the request for reauthentication 
([0053], lines 16-23). 

But, O'Neill may not explicitly disclose the transmission to the terminal of the 
reauthentication identity is in response to the request for the full authentication of 
terminal. Rather, O'Neill simply discloses the terminal has a reauthentication 
identity and is full authenticated, but is silent in regards to the order in which 
those steps occur. 
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However, Bhagwat discloses transmitting a reauthentication identity to a 
terminal in response to an authentication request (column 13, lines 18-24, a 
mobile host (terminal) authenticates with a PPP Back end server, and once 
authenticated receives a cookie (a reauthentication identity) which allows for fast 
re-authentication; fast authentication further disclosed in column 13, lines 52-59). 

Therefore it would have been obvious to one of ordinary skill in the art at the 
time of the invention to combine the teachings of O'Neill and Bhagwat because 
the substitution of one known element (i.e. Bhagwat's method of providing a 
reauthentication identity) for another would have yielded predictable results (fast 
reauthentication for mobile devices, i.e. the end result of both Bhagwat and 
O'Neill) to one of ordinary skill in the art. 

10. As to claims 4, 7, 13, 15, and 20, they are rejected by the same rationale set 
forth in claim 1's rejection. 

1 1 .As to claim 10, O'Neill discloses a system comprising: 

a first authentication server configured to receive a request for full 
authentication of a terminal ([0031], lines 1-8, every mobile device (terminal or 
end node) will have a home AAA server (first authentication server) (see Fig. 1), 
at this home AAA server will be stored service profiles that inherently require full 
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authentication of that particular mobile device), and configured to transmit to the 
terminal a reauthentication identity including a unique realm name uniquely 
identifying the first authentication server ([0053], lines 13-17, the NAI 
(reauthentication identity) of any end node (terminal) includes a realm name and 
identifies the home authentication server; that realm name inherently is 
transmitted to the mobile device); and 

a second authentication server configured to receive a request for 
reauthentication from the terminal, the request for reauthentication including the 
reauthentication identity including the unique realm name Identifying the first 
authentication service ([0053], lines 13-23, any end node (terminal) sending an 
authentication request identifying its home authentication server (via a 
"reauthentication identity") to a visited AAA server (second authentication server) 
reads upon "a request for reauthentication" as the end node was previously 
authorized by It's home authentication server, as that server stores It's service 
profile), and configured to route the request for reauthentication to the first 
authentication server according to the unique realm name identifying the first 
authentication server ([0053], lines 16-23). 

But, O'Neill may not explicitly disclose the transmission to the terminal of the 
reauthentication identity is in response to the request for the full authentication of 
terminal. Rather, O'Neill simply discloses the terminal has a reauthentication 
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identity and is full authenticated, but is silent in regards to the order in which 
those steps occur. 

However, Bhagwat discloses transmitting a reauthentication identity to a 
terminal in response to an authentication request (column 13, lines 18-24, a 
mobile host (terminal) authenticates with a PPP Back end server, and once 
authenticated receives a cookie (a reauthentication identity) which allows for fast 
re-authentication; fast authentication further disclosed in column 13, lines 52-59). 

Therefore it would have been obvious to one of ordinary skill in the art at the 
time of the invention to combine the teachings of O'Neill and Bhagwat because 
the substitution of one known element (i.e. Bhagwat's method of providing a 
reauthentication identity) for another would have yielded predictable results (fast 
reauthentication for mobile devices, i.e. the end result of both Bhagwat and 
O'Neill) to one of ordinary skill in the art. 

12. As to claims 27 and 29, O'Neill discloses a method for use by a terminal, they are 
rejected by the same rationale set forth in claim 10's rejection 



13. As to claim 24, O'Neill discloses wherein the authentication network element is 
an authentication server (Fig. 5, label 114). 
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14. As to claim 25, O'Neill discloses wherein the authentication network element is a 
proxy server (Fig. 5, label 135). 

15. As to claim 26, O'Neill discloses wherein the authentication network element is a 
service access point for authentication by an authentication server (Fig. 5, label 
128). 

16. Claims 14 and 21, are rejected under 35 U.S.C. 103(a) as being unpatentable 
over O'Neill in view of Bhagwat as applied to claims 13 and 20 above, and in 
view of Barriga-Caceres et al (US Pub No. 2003/0163733), hereafter "Barriga." 

17. As to claims 14 and 21 , O'Neill and Bhagwat do not explicitly disclose wherein 
the means for transmitting to an authentication network element a request for 
reauthentication using the reauthentication identity including the unique realm 
name includes the reauthentication identity in an identity response packet 
according to an Extensible Authentication Protocol. 

However, Barriga discloses an authentication system (Abstract) that utilizes 
an Extensible Authentication Protocol ([0101]). 

Therefore it would have been obvious to one of ordinary skill in the art at the 
time of the invention to combine the teachings of O'Neill and Bhagwat with 
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Barriga in order to utilize a well-known protocol in the art that would allow 
O'Neill's system to be compatible with other, already deployed, systems. 



Conclusion 

18. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Thomas J. Dailey whose telephone number is 
571-270-1246. The examiner can normally be reached on Monday thru Friday; 
9:00am - 5:00pm. 

19. If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, John Follansbee can be reached on 571-272-3964. The fax phone 
number for the organization where this application or proceeding is assigned is 
571-273-8300. 

20. Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR 
only. For more information about the PAIR system, see http://pair- 
direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll- 
free). If you would like assistance from a USPTO Customer Service 
Representative or access to the automated information system, call 800-786- 
9199 (IN USA OR CANADA) or 571-272-1000. 
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